Privacy Policy

With this document (“Information”) the Data Controller, as defined below, wishes to inform you about the purposes and methods of processing your personal data and about the rights recognized by the Regulation (EU) 2016/679 concerning the protection of natural persons , with regard to the processing of personal data and their free circulation (“GDPR”). This Information may be integrated by the Data Controller if any additional services requested by you involve further processing

HOLDER OF THE TREATMENT

Dario Marchese born in RM on 17/08/1976 mail info@ostiapartment.it Rome, Italy

TYPES OF DATA PROCESSED

● The processing activities carried out are aimed at acquiring the following personal data:

Category

Guy

Common data

Personal data

Common data

Navigation log

●     

CATEGORIES OF INTERESTED PARTIES

The processing activities carried out are aimed at the following categories of data subjects:

Category

Individuals, legal persons, public and private organizations.

PURPOSE OF THE TREATMENT AND CONDITION THAT MAKES THE TREATMENT LAWFUL

3. CUSTOMERS – Marketing

Transmission of commercial proposals promoted by the Data Controller.

Condition Lawfulness Treatment:  Consent – Art. 6, c.1, let. to. GDPR

 Purpose of the treatment:

● Transmission of commercial newsletters to the e-mail addresses of customers and / or potential customers.

● Transmission of instant messages using tools such as SMS, Whatsapp, Telegram.

● Transmission of instant messages using tools such as SMS, Whatsapp, Telegram.

 Nature of the provision: Optional – Failure to provide the data will make it impossible for the interested party to receive messages relating to the promotions proposed by the Data Controller

 Personal data retention period: The data provided will be deleted immediately following the termination of the contract or revocation of consent. Data relating to prospects, for which the contract will not be finalized, will be deleted within 24 months of registration.

 Methods of Treatment: The treatment is mainly carried out with IT tools.

 

4. SITE – Navigation Data

Obtain anonymous statistical information on use, check the correct functioning of the site, ascertain responsibility in the event of hypothetical computer crimes against the Owner.

Condition Lawfulness Treatment:  Legitimate Interest – Art. 6, c.1, let. f. GDPR

 Purpose of the treatment:

● Data analysis to carry out the evolution and maintenance of the website.

● Assessment of responsibility in the event of potential computer crimes against the site and / or the data subjects.

● Statistical analysis, anonymous, on the use of the site.

 Nature of the provision: Mandatory – Failure to provide the data will make it impossible for the company to provide the web service provided.

 Personal data retention period: The data are kept for 30 days.

 Methods of Treatment: The treatment is performed with IT tools.

 

5. Web and Social

Treatment connected to the management of customer care activities on the web, such as for example: the response to requests sent via the form, the comment on a facebook / instagram or youtube post or the management of a problem reported online.

Condition Lawfulness Treatment:  Legitimate Interest – Art. 6, c.1, let. f. GDPR

 Purpose of the treatment:

● The interest of the owner and of the interested party in processing personal data in order to fulfill the requests received through the web is legitimate

 Nature of the provision: Mandatory – The revocation of the processing will not allow the owner to use personal data to answer the questions of the interested party.

 Personal data retention period: Personal data will be actively processed for the time necessary to manage the existing relationship. The information collected will be deleted within 60 days. Public posts shared autonomously on web platforms may be deleted according to the rules provided by the manager (facebook, instagram, youtube, etc) or by making a request to the data controller.

 Type of data processed:

 Methods of Treatment: The treatment is manual without any automatism

 Information on minors: data of minors will not be processed

 

6. CUSTOMERS – Marketing for similar products

Transmission of newsletters relating to similar products already purchased by customers.

Condition Lawfulness Treatment:  Soft Spam – Art. 130 paragraph 4

 Purpose of the treatment:

● Transmission of commercial proposals relating to similar products already purchased / requested by customers.

 Nature of the provision: Optional – Failure to provide data will make it impossible for the interested party to receive newsletters relating to promotions proposed by the Data Controller

 Personal data retention period: The data provided will be deleted immediately following the termination of the contract or opposition to the processing.

 Methods of Treatment: The treatment is mainly carried out with IT tools.

 

7. SITE – Requests from the Site

Requests made by interested parties through the website of the Data Controller. Treatment connected to the management of customer care activities on the web, such as for example: the response to requests sent via the form, the comment on a facebook / instagram or youtube post or the management of a problem reported online, telephone requests, for evaluations of a contractual and pre-contractual nature.

Condition Lawfulness Treatment:  Contract Execution – Art. 6, c.1, let. b. GDPR

 Purpose of the treatment:

● Sending requests via web platform tools.

 Nature of the provision: Optional – Failure to provide the data will make it impossible for the Data Controller to respond to the requests of the interested party.

 Personal data retention period: Processing of the request.

 Type of data processed: common data

 Methods of Treatment: The treatment is performed with IT tools.

 

9. CKS – Use of cookies necessary for the processing of statistical and technical analyzes for the use of the site

We use, without your consent, cookies necessary for the processing of statistical and technical analyzes for the use of the site.

Condition Lawfulness Treatment:  Contract Execution – Art. 6, c.1, let. b. GDPR

 Purpose of the treatment:

● Use of Technical and Technical Session Cookies to ensure the correct functioning of the site / application, as well as ensure the provision of the services offered by the Owner, requested by the contractor or by the user (see Article 122, paragraph 1 of the Code).

● Use of Statistical Technical Cookies with anonymized IP in order to produce aggregate statistics relating to the use of the site / application performed by the user.

 Nature of the provision: Mandatory – Technical cookies are necessary for the site to function. Blocking cookies by the user will make it impossible to use the services of the site / application.

 Personal data retention period: See the type of each cookie used.

 Methods of Treatment: The treatment is mainly carried out with IT tools.

 

 DATA TRANSFER EXTRA UE

Personal data are processed exclusively within the European Union

 RECIPIENTS OF THE TREATMENT

●      Data Controller: Legal representative.

RIGHTS OF THE INTERESTED PARTY – COMPLAINT TO THE SUPERVISORY AUTHORITY

 

In relation to the treatments described in this Notice, as an interested party you may, under the conditions provided for by the GDPR, exercise the rights enshrined in articles 15 to 22 of the GDPR and, in particular, the following rights:                

●      right of access – article 15 GDPR: right to obtain confirmation as to whether or not personal data concerning you are being processed and, in this case, to obtain access to your personal data;

●      right of rectification – article 16 GDPR: right to obtain, without undue delay, the rectification of inaccurate personal data concerning you and / or the integration of incomplete personal data;

●      right to cancellation (right to be forgotten) – article 17 GDPR: right to obtain, without undue delay, the cancellation of personal data concerning you. The right to erasure does not apply to the extent that the processing is necessary for the fulfillment of a legal obligation or for the performance of a task carried out in the public interest or for the ascertainment, exercise or defense of a right. in court.

●      right to limitation of treatment – article 18 GDPR: right to obtain limitation of treatment, when: a) the data subject disputes the accuracy of the personal data; b) the processing is unlawful and the interested party opposes the cancellation of personal data and requests instead that its use be limited; c) the personal data are necessary for the interested party to ascertain, exercise or defend a right in court; d) the interested party opposed the processing pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.

●      right to data portability – article 20 GDPR: right to receive, in a structured format, commonly used and readable by an automatic device, the personal data concerning you provided to the Data Controller and the right to transmit them to another controller without impediments , if the processing is based on consent and is carried out by automated means. Furthermore, the right to obtain that your personal data be transmitted directly from this holder to another holder if this is technically feasible;

●      right to object – article 21 GDPR: right to object, at any time, to the processing of personal data concerning you based on the condition of legitimacy of the legitimate interest, including profiling, unless there are legitimate reasons for the Data Controller to continue processing which prevail over the interests, rights and freedoms of the interested party or for the assessment, exercise or defense of a right in court.

●      right not to be subjected to an automated decision-making process – article 22 GDPR: the interested party has the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or similarly significantly on your person, unless this is necessary for the conclusion or execution of a contract or you have given your consent. In any case, an automated decision-making process cannot concern your personal data and you can at any time obtain human intervention from the data controller, express your opinion and contest the decision.

●      right to lodge a complaint with the Guarantor for the protection of personal data: http://www.garanteprivacy.it ;

●      revoke the consent given on every occasion and with the same ease with which it was provided without prejudice to the lawfulness of the treatment based on the consent given before the revocation.

The above rights may be exercised against the Owner by contacting the references indicated above.

The exercise of your rights as an interested party is free pursuant to article 12 of the GDPR. However, in the case of manifestly unfounded or excessive requests, also due to their repetition, the Data Controller may charge you a reasonable fee, in light of the administrative costs incurred to manage your request, or deny the satisfaction of your request.

Finally, we inform you that the Data Controller may request further information necessary to confirm the identity of the interested party.

●      RIGHT OF REVOCATION:

revoke the consent – at any time, with the same ease with which it was provided, without prejudice to the lawfulness of the treatment based on the consent given before the revocation;

●      RIGHT OF COMPLAINT:

The interested party also has the right to lodge a complaint with the Guarantor for the protection of personal data www.garanteprivacy.it.

× WhatsApp